@Bernie, a similar point was made at the FTC's IoT workshop earlier this week. Someone said that we're going to have to deal with some security disasters before we even understand the problem well enough to come up with solutions.